Privacy Policy
Last Updated: January 2026
Our Privacy Philosophy
Heronix Education Systems is built on a fundamental principle: your data belongs to you. Unlike cloud-based SaaS providers, we don't store, access, or monetize your student data. Our on-premise software runs entirely on your infrastructure.
1. Data We Do NOT Collect
Because Heronix software is installed on your servers (on-premise), we do not have access to:
- Student personally identifiable information (PII)
- Student educational records
- Teacher or staff information
- Parent/guardian data
- Grades, attendance, or behavioral records
- Any data entered into the Heronix software
Your school maintains complete ownership and control of all data stored in Heronix systems.
2. Website Data Collection
When you visit our website (heronixedu.com), we may collect:
- Contact Form Submissions: Name, email address, school name, and message content when you voluntarily submit our contact form
- Analytics Data: Anonymous usage statistics such as page views, browser type, and device information (via standard analytics tools)
- Cookies: Session cookies for website functionality
We do not sell, rent, or share this information with third parties for marketing purposes.
3. FERPA Compliance
Heronix Education Systems is designed with FERPA (Family Educational Rights and Privacy Act) compliance in mind:
- No Third-Party Data Sharing: Student records never leave your network
- Data Ownership: Schools maintain 100% ownership of all educational records
- Access Control: Role-based permissions ensure only authorized personnel access student data
- Audit Logging: Complete audit trails of all data access and modifications
- Guardian Security Perimeter: Cryptographic tokenization protects student PII when integrating with third-party vendors
4. Data Storage & Security
On-Premise Architecture:
- All data is stored on your school's servers
- No cloud storage or third-party hosting
- AES-256 encryption for sensitive data
- Offline-first design - works without internet connectivity
Your IT team controls:
- Server security and access
- Backup and disaster recovery
- Network security and firewalls
- User authentication and permissions
5. Third-Party Integrations
When using Heronix with third-party services (LMS platforms, classroom tools, etc.):
- Guardian Security Perimeter (optional) tokenizes student data before sending to vendors
- Each vendor receives unique, isolated tokens - not real student identities
- If a vendor is breached, only meaningless tokens are exposed
- You control which integrations are enabled
6. Your Rights
Since your school owns all data in the Heronix system:
- Access: Full access to all data at any time
- Export: Export data in standard formats (CSV, JSON, SQL)
- Deletion: Delete any data at your discretion
- Portability: Migrate data to other systems without restriction
Heronix cannot access, modify, or delete your data because we don't have access to it.
7. Support & Maintenance
If you purchase an optional support contract:
- Support is provided via email and phone
- We may request screenshots or logs to diagnose issues
- We do not require remote access to your systems
- Any data you share for support is used solely for troubleshooting
8. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. Significant changes will be communicated via our website or email to registered contacts.
9. Contact Us
For privacy-related questions or concerns:
- Email: privacy@heronixedu.com
- Website: Contact Form